PT-2022-38357 · Packagist · Drupal/Lottiefiles Field
Published
2022-06-29
·
Updated
2022-06-29
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Lottiefiles Field module enables you to integrate the lottiefiles features into your page.
The module does not sufficiently filter user-provided text on output, resulting in a Cross-Site Scripting (XSS) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create or edit content that has lottiefiles fields.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal/Lottiefiles Field